SolarWinds ARM Vulnerable to Directory Traversal Remote Code Execution

CVE-2024-23479

Summary

The vulnerability in SolarWinds Access Rights Manager (ARM) relates to a Directory Traversal flaw that enables an unauthenticated attacker to execute remote code. By manipulating file paths or input parameters, an attacker may gain unauthorized access to sensitive files and execute arbitrary commands on the server, posing a significant security risk. Organizations using affected versions of SolarWinds ARM should apply patches and review their security measures to mitigate potential exploitation.

References